windows下用nginx配置https服务器

原创

fengyuzaitu 2019-10-17 11:26:40 博主文章分类：Windows ©著作权

文章标签 nginx https 文章分类 C/C++ 后端开发

©著作权归作者所有：来自51CTO博客作者fengyuzaitu的原创作品，请联系作者获取转载授权，否则将追究法律责任

步骤一下载安装包

http://nginx.org/en/download.html ，下载nginx-1.16.1.zip

在控制台cmd中进入解压目录运行指令 start nginx

http://slproweb.com/products/Win32OpenSSL.html 下载OpenSSL工具生成证书

步骤二创建SSL证书

http://slproweb.com/products/Win32OpenSSL.html

下载OpenSSL

创建私钥 openssl genrsa -out server.key 2048

创建csr证书 openssl req -new -key server.key -out server.csr

生成crt证书 openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

问题

生成CA私钥的时候，报错:

Can’t open C:\Program Files\Common Files\SSL/openssl.cnf for reading,no such file or directory

原因：

出现这个错误的原因是没有设置环境变量OPENSSL_CONF

解决:

C:\Users\admin>set OPENSSL_CONF=d:\openssl\OpenSSL-Win64\bin\openssl.cfg

步骤三配置nginx下的nginx.conf配置文件

server {
        listen       80   ssl;#配置ssl加密
        server_name localhost;

        ssl_certificate      F:/example/cpp-httplib-build/nginx-1.16.1/server.crt; # 这个是证书的crt文件所在目录
        ssl_certificate_key F:/example/cpp-httplib-build/nginx-1.16.1/server.key; # 这个是证书key文件所在目录

ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;

  ssl_ciphers HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers on;

        #charset koi8-r;

#access_log logs/host.access.log main;

        location / {
            root   html;
            index index.html index.htm;
        }

#error_page 404 /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504 /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index index.php;
        #    fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny all;
        #}
    }